Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd724177-f726-305b-8eca-4fbd4262b741.roa
File:                     dd724177-f726-305b-8eca-4fbd4262b741.roa (raw, json)
Hash identifier:          xnQozao/OrnETg6DeWkHPr1NRBPYkhkZK2Ol/7g/vYw=
Subject key identifier:   7B:02:C0:36:E4:87:1B:10:3F:99:8D:76:52:C3:33:CF:30:66:17:7D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA795C45D4C9DF431FD86B3A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd724177-f726-305b-8eca-4fbd4262b741.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     834
IP address blocks:        74.1.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c4:5d:4c:9d:f4:31:fd:86:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=72faf270-d68f-4781-ba3e-fe5f5addbbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:cc:8d:66:34:85:50:bc:98:09:97:ee:41:
                    87:d7:c5:fa:8e:3f:4a:a8:e9:ca:89:80:3b:bd:ef:
                    23:85:ff:68:1a:57:b3:28:03:1a:b7:e7:27:53:b0:
                    fd:a5:a1:0e:6f:92:5d:20:62:9f:84:25:c5:54:19:
                    34:30:33:5c:54:3a:ba:ee:23:2a:0a:3c:d9:02:82:
                    9b:94:87:b7:9d:e7:4e:11:e9:8f:83:c8:ac:52:ee:
                    48:64:f5:28:92:2c:0c:07:c2:43:0f:56:e7:ac:fe:
                    e8:d2:ee:8f:0a:ad:d7:f9:9b:80:12:4f:e7:de:55:
                    c5:b9:8d:c8:a9:a8:e2:31:d7:d5:6e:54:9f:cc:28:
                    5b:73:3c:60:e4:2b:ff:fe:2a:b3:e5:90:84:5e:2b:
                    e9:95:9d:e7:8f:8c:6a:82:23:2d:10:46:df:df:51:
                    c7:84:82:e0:cc:f4:a0:43:0d:71:1d:d1:16:d7:0e:
                    ef:20:ef:98:08:ae:e3:c3:7c:5e:46:3c:f9:b9:4a:
                    61:45:04:4f:9b:3c:8d:f7:52:2f:97:c8:93:d0:49:
                    f1:06:d8:91:ec:6b:b5:91:91:21:d0:2b:98:bc:1b:
                    06:5e:ad:af:4f:76:62:c5:5b:ff:35:64:16:9c:95:
                    25:4f:69:9a:35:c8:ac:b0:ba:d2:33:f6:6b:1a:97:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:02:C0:36:E4:87:1B:10:3F:99:8D:76:52:C3:33:CF:30:66:17:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd724177-f726-305b-8eca-4fbd4262b741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e9:89:93:5e:b4:e0:a0:d0:2e:02:8b:13:84:13:20:30:65:
         bb:c6:49:5c:a5:ba:20:d3:cf:af:97:63:67:d9:9e:41:53:d2:
         3c:2a:52:87:87:68:fc:b4:cf:17:64:14:6a:02:67:81:70:ac:
         56:ec:c4:b3:bb:91:e8:c2:79:1d:87:a1:8a:2a:a7:9a:10:77:
         a7:dc:56:cf:e7:d3:eb:5b:64:00:6f:0f:06:ee:da:71:3f:14:
         6e:82:8b:24:f7:62:ab:bc:ce:85:43:54:5f:a9:ac:b8:cc:d5:
         1d:cb:67:95:a3:bb:a8:d1:55:9b:20:f3:2a:9e:4e:61:53:70:
         4f:53:ae:a4:e6:d6:5a:47:a5:45:8a:f5:d5:08:9a:de:05:48:
         95:52:d9:6e:39:4d:4a:0d:33:6a:c5:dd:b6:76:be:9d:d8:9b:
         26:fa:c7:3c:5b:6d:b4:75:43:c7:60:86:58:4e:be:31:19:e6:
         df:2c:b9:2a:72:d4:2b:e4:91:bc:ac:be:71:9d:d4:94:d1:2e:
         57:eb:b4:f0:31:11:f9:64:95:54:5d:94:b3:8d:a5:a2:ef:93:
         92:4c:48:36:c8:57:12:76:af:35:0e:bd:a1:7f:73:73:e7:ec:
         03:b7:65:a7:75:87:26:20:be:47:51:5c:14:24:b6:13:64:7d:
         24:9a:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:55:31 2026 by rpki-client